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What is claimed is: 

1 1. A digital signing method, comprising: 

2 applying a secret key to a message to generate a digital signature for the 

3 message; 

4 distributing a digital-signature-attached message including the generated 

5 digital signature and the message; 

6 registering the digital-signature-attached message as log data with a log 

7 list; and 

8 providing said log list responsive to a request. 

1 2. The digital signing method of claim 1, wherein said message is a 

2 hash value of another message. 

1 3. The digital signing method of claim 1, wherein: 

2 said applying a secret key to a message to generate a digital signature for 

3 the message further comprises: 

4 applying said secret key to a message and data from a previously signed 

5 message retrieved from a recent log data registered in said log list to generate a digital 

6 signature for the message; and wherein: 

7 said distributing a digital-signature-attached message including the 

8 generated digital signature and the message, further comprises: 

9 distributing a digital-signature-attached message including the generated 
10 digital signature, the data from a previously signed message, and the message. 

1 4. The digital signing method of claim 1 , wherein said log data further 

2 comprises a distribution destination, and wherein: 

3 said registering log data of the digital-signature-attached message with a 

4 log list further comprises: 

5 registering log data of a digital-signature-attached message with a log list, 

6 said log data including a distribution destination attached thereto. 

1 5. The digital signing method of claim 1, said method further 

2 comprising: 




3 permitting registration of the log data with said log list only when the data 

4 from a previously signed message included in said digital-signature-attached message is 

5 included in the latest log data registered with said log list. 

1 6. The digital signing method of claim 1, further comprising: 

2 obtaining a timestamp from a trusted authority, said timestamp generated 

3 by applying a second secret key to the digital signature, and a time; and 

4 said distributing a digital-signature-attached message including the 

5 generated digital signature and the message, further comprises: 

6 distributing a digital-signature-attached message including the generated 

7 digital signature, the timestamp, and the message. 

1 7. A digital signature verifying method, comprising: 

2 accepting a digital-signature-attached message; 

3 acquiring a log list of a digital signer, wherein said digital-signature- 

4 attached message may have been distributed by said digital signer is to be verified; and 

5 checking whether log data of said digital-signature-attached message is 

6 registered in said log list, and 

7 if the log data is registered in the log list, authenticating that the digital- 

8 signature-attached message was distributed by the digital signer. 

1 8. The digital signature verifying method of claim 7, said method 

2 further comprising: 

3 checking whether the digital signature included in the digital-signature- 

4 attached message has been generated for the message included in the digital-signature- 

5 attached message, using the digital signature and the message included in said digital- 

6 signature-attached message and a public key paired with a secret key of said digital 

7 signer. 

1 9. The digital signature verifying method of claim 7, wherein said 

2 digital-signature-attached message further comprises data from a previously signed 

3 message, said method further comprising: 

4 checking whether the digital signature included in the digital-signature- 

5 attached message has been generated for the message included in the digital-signature- 

6 attached message, using the digital signature, the data from a previously signed message, 



<1 » 4 




7 and the message included in said digital-signature-attached message and a public key 

8 paired with a secret key of said digital signer. 

1 10. The digital signature verifying method of claim 9, said method 

2 further comprising: 

3 checking whether data from a previously signed message included in said 

4 digital-signature-attached message is included in the log data registered immediately 

5 before log data of said digital-signature-attached message in said log list, and if the data 

6 from a previously signed message is included in the immediately previous registered log 

7 data, authenticating that said log list has not been altered. 

1 11. The digital signature verifying method of claim 7, wherein said log 

2 data further comprises a distribution destination, said method further comprising: 

3 acquiring a digital-signature-attached message from the distribution 

4 destination attached to the log data registered immediately before/after the log data of 

5 said digital-signature-attached message in said log list, and 

6 checking whether the acquired message is included in said immediately 

7 previous/subsequent registered log data, and if the message is included, authenticating 

8 that said log list has not been altered. 

1 12. The digital signature verifying method of claim 7, wherein said 

2 digital-signature-attached message further comprises a timestamp created using a second 

3 secret key, said method further comprising: 

4 acquiring a digital signature and a time data by applying a public key 

5 paired with said second secret key to the timestamp included in said digital-signature- 

6 attached message; and 

7 checking whether date and time indicated by the acquired time data 

8 exceeds a date and time of signing of said digital-signature-attached message, and if the 

9 date and time indicated by the time data does not exceed the date and time of signing of 

10 said digital-signature-attached message, authenticating the validity of the acquired digital 

1 1 signature. 

1 13. A digital signing apparatus, comprising: 

2 a processor; and 
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3 a storage medium; wherein said processor applies a secret key to a 

4 message to generate a digital signature for the message; and wherein 

5 said processor prepares a digital-signature-attached message including the 

6 generated digital signature and the message; and wherein 

7 said processor registers log data of said digital-signature-attached message 

8 with a log list in said storage medium. 

1 14. The digital signing apparatus of claim 13, wherein, said message is 

2 a hash value of another message. 

1 15. The digital signing apparatus of claim 13, wherein 

2 said processor applies said secret key to a message and data from a 

3 previously signed message retrieved from a recent log data registered in said log list to 

4 generate a digital signature for the message; and wherein 

5 said processor prepares a digital-signature-attached message that includes 

6 the generated digital signature, the message and the data from a previously signed 

7 message; and wherein 

8 said processor registers log data of a digital-signature-attached message 

9 including the generated digital signature, the message, and the data from a previously 
10 signed message, with said log list. 

1 16. The digital signing apparatus of claim 13, wherein said log data 

2 further comprises a distribution destination, and wherein: 

3 said processor registers log data of a digital-signature-attached message 

4 with a log list, said log data including a distribution destination attached thereto. 

1 17. The digital signing apparatus of claim 13, wherein: 

2 registration of the log data with said log list is permitted only when the 

3 data from a previously signed message included in said digital-signature-attached 

4 message is included in the latest log data registered with said log list. 

1 18. The digital signing apparatus of claim 13, wherein: 

2 said processor obtains a timestamp from a trusted authority, said 

3 timestamp generated by applying a second secret key to the digital signature, and a time; 

4 and 



5 said processor prepares said digital-signature-attached message including 

6 the generated digital signature, the timestamp, and the message. 

1 19. The digital signing apparatus of claim 13, further comprising: an 

2 interface configured to be connectable to a computer. 

1 20. The digital signing apparatus of claim 19, wherein: 

2 if a number of the log data registered with the log list exceeds a particular 

3 value, said processor outputs at least one of a plurality of log data registered with the log 

4 list to said computer, whereupon said computer registers said at least one of a plurality of 

5 log data with a second log list prepared in said computer, and thereupon, 

6 said processor deletes said at least one of a plurality of log data from said 

7 log list in said storage medium. 

1 21 . A digital signature verifying apparatus, comprising: 

2 a processor interconnected with an input device, wherein: 

3 said input device accepts a digital-signature-attached message to be 

4 verified and a log list of a digital signer; and wherein 

5 said processor checks whether log data of said digital-signature-attached 

6 message is registered with said log list, and 

7 if the log data is registered with the log list, authenticates that the digital- 

8 signature-attached message has been generated by said digital signer. 

1 22. A digital signature verifying apparatus of claim 21, wherein: 

2 said processor authenticates whether the digital signature included in said 

3 digital-signature-attached message has been generated for the message included in the 

4 digital-signature-attached message, using the digital signature and the message included 

5 in said digital-signature-attached message and a public key paired with a secret key of 

6 said digital signer. 

1 23 . A digital signature verifying apparatus of claim 2 1 , wherein said 

2 digital-signature-attached message further comprises data from a previously signed 

3 message, and wherein 

4 said processor authenticates whether the digital signature included in said 

5 digital-signature-attached message has been generated for the message included in the 




6 digital-signature-attached message, using the digital signature, the data from a previously 

7 signed message, and the message included in said digital-signature-attached message and 

8 a public key paired with a secret key of said digital signer. 

1 24. A digital signature verifying apparatus of claim 23, wherein 

2 said processor checks whether the data from a previously signed message 

3 included in said digital-signature-attached message is included in the log data registered 

4 immediately before the log data of said digital-signature-attached message in said log list, 

5 and if the data from a previously signed message is included in the immediately previous 

6 registered log data, said processor authenticates that said log list has not been altered. 

1 25. The digital signature verifying apparatus of claim 21, wherein said 

2 log data further comprises a distribution destination, and wherein: 

3 said processor acquires a digital-signature-attached message from the 

4 distribution destination attached to the log data registered immediately before/after the 

5 log data of said digital-signature-attached message in said log list, and wherein 

6 said processor checks whether the acquired message is included in said 

7 immediately previous/subsequent registered log data, and if the message is included, said 

8 processor authenticates that said log list has not been altered. 

1 26. The digital signature verifying apparatus of claim 21, wherein said 

2 digital-signature-attached message further comprises a timestamp created using a second 

3 secret key, and wherein: 

4 said processor acquires a digital signature and a time data by applying a 

5 public key paired with said second secret key to the timestamp included in said digital- 

6 signature-attached message; and wherein 

7 said processor checks whether date and time indicated by the acquired 

8 time data exceeds a date and time of signing of said digital-signature-attached message, 

9 and if the date and time indicated by the time data does not exceed the date and time of 

10 signing of said digital-signature-attached message, said processor authenticates the 

1 1 validity of the acquired digital signature. 

1 27. A computer program product for creating a digital signature, said 

2 program product comprising: 




3 code that applies a secret key to a message to generate a digital signature 

4 for the message; 

5 code that prepares a digital-signature-attached message including the 

6 generated digital signature and the message; 

7 code that registers log data of said digital-signature-attached message with 

8 a log list in said storage medium; and 

9 a computer readable storage medium for embodying the codes. 

1 28. A computer program product of claim 27, wherein the computer 

2 readable storage medium is a computer readable medium for storing the codes. 

1 29. A computer program product of claim 27, wherein the computer 

2 readable storage medium is a computer readable medium for transmitting the codes. 

1 30. A computer program product for verifying a digital signature, said 

2 computer program product comprising: 

3 code that accepts a digital-signature-attached message and a log list from a 

4 digital signer; and 

5 code that checks whether log data of said digital-signature-attached 

6 message is registered with said log list, and if the log data is registered with the log list, 

7 authenticates that the digital-signature-attached message has been generated by said 

8 digital signer; and 

9 a computer readable storage medium for storing the codes. 

1 3 1 . A digital timestamp issuing apparatus, comprising: 

2 a processor and an interface, wherein 

3 said processor generates a timestamp by applying a secret key to data 

4 received by said interface, said data comprising a digital signature sent from a digital 

5 signer, and a reception time of the digital signature; and wherein 

6 said processor transmits said timestamp to said digital signer using said 

7 interface. 

1 32. A digital signing system, said system comprising: 

2 a digital signing apparatus; 

3 a timestamp issuing apparatus; 
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4 said digital signing apparatus comprising: 

5 a processor and a communication interface, wherein said processor applies 

6 a first secret key to a message or its hash value to generate a digital signature; and 

7 said processor transmits said digital signature to said timestamp issuing 

8 apparatus by said communication interface and acquires a timestamp in response; and 

9 wherein 

10 said processor attaches the acquired timestamp to said message to create a 

1 1 digital-signature-attached message; and 

12 said timestamp issuing apparatus comprising: 

13 a processor and a communication interface, wherein 

14 said processor generates a timestamp by applying a second secret key to 

15 data which includes the digital signature sent by said digital signing apparatus, and a 

16 reception time of the digital signature; and wherein said processor 

1 7 transmits said timestamp to said digital signing apparatus. 

1 33. The digital signing system of claim 32, said system further 

2 comprising: 

3 a digital signature verifying apparatus comprising: 

4 a processor interconnected with an input device, wherein 

5 said input device accepts a digital-signature-attached message to be 

6 verified; and wherein 

7 said processor acquires a digital signature and time data by applying a 

8 public key paired with the secret key of the timestamp apparatus to the timestamp 

9 included in said digital-signature-attached message; and thereupon, 

10 said processor checks whether date and time indicated by the time data 

1 1 exceeds expiration date and time assigned at said digital signing apparatus, and when the 

12 date and time indicated by the time data does not exceed the expiration date and time, 

13 said processor authenticates the validity of the said digital signature; and thereupon, 

14 said processor authenticates whether said digital signature included in said 

15 digital-signature-attached message has been generated for the message included in said 

16 digital-signature-attached message, using said digital signature, the message included in 

17 said digital-signature-attached message, and a public key paired with the secret key of the 

18 digital signing apparatus. 



